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Amendments to the Claims: 

This listing of claims is to replace all prior versions and listings of claims in 
this application: 

1. (Currently Amended) A method comprising: 
receiving an original digital good; and 

randomly applying various forms of protection to a plurality of segments of 
the original digital good to produce a protected digital good, 

wherein at least two of the segments overlap one another, the overlapping 
segments being different from each other , 

2. (Original) A method as recited in claim 1, wherein the randomly 
applying comprises pseudo randomly applying the various forms of protection 
according to pseudo random techniques. 

3. (Original) A method as recited in claim l s wherein the applying 
comprises randomly selecting the forms of protection from a set of available forms 
of protection. 

# 

4. (Original) A method as recited in claim I, wherein the applying 
comprises applying the various forms of protection to randomly selected portions 
of the original digital good. 
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5. (Original) A method as recited in claim 1, wherein the various forms 
of protection are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

6. (Original) A method as recited in claim 1, wherein the applying 
comprises applying a form of protection in which a checksum can be computed on 
a set of bytes of the digital good without actually reading the bytes. 

7- (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 1. 

8. (Currently Amended) A method comprising: 

segmenting a digital good into a plurality of segments; 

selecting multiple segments from the plurality of segments; and 

transforming only the selected segments according to different protection 
techniques to produce a protected digital good having a composite of variously 
protected segments. 
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9. (Original) A method as recited in claim 8, wherein at least two of the 
segments overlap one another. 

10. (Original) A method as recited in claim 8, wherein the selecting 
comprises randomly selecting the segments. 

11. (Original) A method as recited in claim 8, wherein the transforming 
comprises transforming the selected segments according to randomly chosen 
protection techniques. 

12. (Original) A method as recited in claim 8, wherein the transforming 
comprises: 

augmenting at least one segment using a certain protection technique; and 
inserting a checkpoint, which may be used to evaluate a validity of the 

augmented segment, within the protected digital good but outside of the 

augmented segment being evaluated. 

13. (Original) A method as recited in claim 8, further comprising 
receiving quantitative parameters indicative of how much the protected digital 
good should be altered. 

14. (Original) A method as recited in claim 13, wherein the 
transforming is performed to satisfy the quantitative parameters. 
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15, (Original) A method as recited in claim 8, wherein the protection 
techniques are selected from a group of protection tools comprising code integrity 
verification, acyclic code integrity verification, cyclic code integrity verification, 
secret key scattering, obfuscated function execution, encryption/decryption, 
probabilistic checking, Boolean check obfuscation, in-lining, reseeding pseudo 
random number generators with time varying inputs, anti-disassembly methods, 
varying execution paths between runs, anti-debugging methods, and time/space 
separation between tamper detection and response, 

16. (Original) A method as recited in claim 8, wherein the transforming 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

17, (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 8. 

18. (Original) A method comprising: 

establishing parameters prescribing a desired quantity of protection to be 
applied to a software product; 

parsing the software product into code sections; 
selecting at least one code section; 

augmenting the selected code section to add protection qualities; and 
repeating the selecting and the augmenting for different code sections until 
the desired quantity of protection has been applied. 
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19. (Original) A method as recited in claim 18, wherein the establishing 
comprises enabling a user to enter the parameters. 

20. (Original) A method as recited in claim 1 8, wherein the augmenting 
comprises applying a protection technique selected from a group of protection 
techniques comprising code integrity verification, acyclic code integrity 
verification, cyclic code integrity verification, secret key scattering, obfuscated 
function execution, encryption/decryption, probabilistic checking, Boolean check 
obfuscation, in-lining, reseeding pseudo random number generators with time 
varying inputs, anti-disassembly methods, varying execution paths between runs, 
anti-debugging methods, and time/space separation between tamper detection and 
response. 

21* (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

22, (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 18. 

23. (Currently Amended) A production system, comprising: 
a memory to store an original digital good; and 
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a production server equipped with a set of multiple protection tools that 
may be used to augment the original digital good for protection purposes, the 
production server being configured to parse the original digital good and apply 
protection tools selected from the set of protection tools only to selected portions 
of the original digital good in a random manner to produce a protected digital good 



6 having a composite of the protected selected portions, 

7 

8 24. (Original) A production system as recited in claim 23, wherein the 

9 protection tools are selected from a group of protection tools comprising code 

10 integrity verification, acyclic code integrity verification, cyclic code integrity 

11 verification, secret key scattering, obfuscated fiinction execution, 

12 encryption/decryption^ probabilistic checking, Boolean check obfuscation, in- 

13 lining, reseeding pseudo random number generators with time varying inputs, anti- 

14 disassembly methods, varying execution paths between runs, anti-debugging 
is methods, and time/space separation between tamper detection and response. 

16 

17 25. (Original) A production system as recited in claim 23, wherein the 

ia production server applies a protection tool that enables a checksum to be 

i9 computed on a set of bytes of the digital good without actually reading the bytes. 

20 

21 26. (Original) A production system as recited in claim 23, wherein the 

22 production server has a pseudo random generator to introduce randomness into the 

23 application of the protection tools to various portions of the original digital good. 

24 
25 
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27. (Currently Amended) An obfuscation system, comprising: 
a parser to parse a digital good into a plurality of segments; 

a set of protection tools that may be applied to the segments of the digital 
good to augment the segments with protection qualities; 

a target segment selector to select at least one segment from the plurality of 
segments; and 

a tool selector to select at least one protection tool from the set of protection 
tools and apply the selected protection tool to the selected segment so that a 
protection tool of the set of protection tools is applied only to a selected segment 
of the plurality of segments , 

28. (Original) An obfuscation system as recited in claim 27, wherein 
the protection tools are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

29. (Original) An obfuscation system as recited in claim 27, wherein 
the target segment selector comprises a pseudo random generator to enable 
random selection of the segment. 
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30. (Original) An obfuscation system as recited in claim 27, wherein 
the tool selector comprises a pseudo random generator to enable random selection 
of the protection tool. 

31. (Original) An obfuscation system as recited in claim 27, further 
comprising a quantitative unit to specify a quantity of protection qualities to be 
added to the digital good. 

32. (Currently Amended) A client-server system, comprising: 

a production server to randomly apply various forms of protection only to 
selected portions of a digital good to produce a protected digital good; and 

a client to store and execute the protected digital good, the client being 
configured to evaluate the protected digital good to determine whether the 
protected digital good has been tampered with. 

33. (Currently Amended) One or more computer-readable media 
having computer-executable instructions that, when executed, direct a computing 
device to: 

parse a digital good into a plurality of segments; and 

apply multiple different protection tools to only a selected portion of the 
segments in a random manner to produce a protected digital good having a 
composite of variously protected portions. 
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34. (Original) One or more computer-readable media as recited in claim 
33, further comprising computer-executable instructions to randomly select the 
protection tools from a set of available protection tools, 

35. (Original) One or more computer-readable media as recited in claim 
33, further comprising computer-executable instructions to apply the protection 
tools to randomly selected portions of the original digital good. 

36. (Original) One or more computer-readable media as recited in claim 
33, wherein the protection tools are selected from a group of protection tools 
comprising code integrity verification, acyclic code integrity verification, cyclic 
code integrity verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfiiscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 
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